Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/386b6bb3-22f5-3a74-adda-eb2d96627749.roa
File:                     386b6bb3-22f5-3a74-adda-eb2d96627749.roa (raw, json)
Hash identifier:          80ylojSRTa0P9rF3izWo2/XFDY5nsMBHZC1I5rs0vEE=
Subject key identifier:   63:CC:5F:76:BC:BE:DC:CC:E9:6A:63:01:B2:E9:29:D2:33:65:69:0E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D43060E61D810D680DFA7F20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/386b6bb3-22f5-3a74-adda-eb2d96627749.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        73.68.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:60:e6:1d:81:0d:68:0d:fa:7f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=c8b35054-fd7c-4599-ab6d-1e7801019afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bf:e8:f4:d3:de:8c:2d:c1:80:2a:18:73:6e:
                    23:8b:50:a9:f4:98:90:bb:a5:f6:c4:23:51:af:30:
                    76:cb:a1:fe:f7:22:5f:77:23:3c:b8:a7:b7:cb:c3:
                    56:4d:7c:ef:6a:0d:ed:87:dd:28:27:3b:87:86:0f:
                    11:3e:cd:9c:0a:a5:2b:62:19:42:d6:b7:57:98:51:
                    ea:17:bd:76:30:14:96:ba:3e:dd:d5:08:33:98:ac:
                    05:68:67:b7:36:d3:54:d4:90:0a:51:db:fd:88:ae:
                    34:5a:a1:40:d0:36:e4:12:26:53:3b:7f:a1:c4:4b:
                    26:6f:0b:48:24:f2:7a:96:9a:ed:df:60:9a:9d:1b:
                    77:96:b2:c0:c4:ed:fb:b1:d9:66:f5:c7:e3:7c:c5:
                    9a:26:59:1f:7b:ed:f7:7b:7b:04:35:60:4e:8d:c6:
                    06:ab:00:9a:72:91:49:99:17:e2:8d:fc:e4:c2:c9:
                    47:a4:ef:9f:82:10:75:a2:96:73:91:60:12:0b:e5:
                    ca:4c:db:b5:29:8b:be:13:63:c5:6e:75:ee:d5:b6:
                    5e:db:ba:05:36:60:5a:eb:ca:14:cf:d2:3c:df:a0:
                    e3:78:7e:07:0b:f4:28:2b:c4:eb:2e:69:29:14:5c:
                    aa:16:4e:63:9e:ea:9f:e5:48:56:28:79:3d:80:a9:
                    8c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CC:5F:76:BC:BE:DC:CC:E9:6A:63:01:B2:E9:29:D2:33:65:69:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/386b6bb3-22f5-3a74-adda-eb2d96627749.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.68.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:44:d0:86:32:3a:76:14:6f:29:1b:cf:d7:dc:06:c7:53:ec:
         0d:42:38:ae:50:c1:10:3e:9f:24:ac:83:f8:b6:a6:2b:50:9e:
         9b:a1:cf:d8:3b:7b:88:d9:db:69:b0:10:f2:38:c8:27:05:59:
         46:d8:58:51:ad:27:94:9f:76:d8:e4:d8:35:16:d5:b9:a2:18:
         d2:ef:cd:34:de:28:23:a2:a0:2b:61:2c:f9:78:c1:35:47:9c:
         3c:b5:f5:88:c5:43:5a:b0:ed:67:af:08:25:84:03:a9:5f:51:
         dd:60:ce:23:da:90:b9:d3:65:97:10:69:d5:60:f2:b1:9c:c9:
         56:32:d4:86:df:57:88:32:8e:f4:70:4c:0d:a7:b9:d0:97:11:
         92:a9:32:14:d6:15:5e:d3:f7:c4:74:83:a5:ec:7b:72:e4:8d:
         fa:27:86:47:d5:b3:ff:bb:73:3e:66:ec:18:6a:6d:f1:f3:dd:
         d2:2f:8c:9c:d3:60:a1:e7:70:86:e9:06:d2:45:d0:4a:a9:81:
         e0:ed:13:5d:cd:43:59:12:1e:55:03:cb:59:71:8a:5f:69:79:
         6c:ec:0e:e0:53:df:bc:77:45:8f:38:5c:a7:b7:c9:8b:23:7d:
         e3:ad:4d:b3:3e:fd:f6:23:03:70:68:ca:bb:0f:6a:6a:85:6a:
         4d:e1:3c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:36:54 2025 by rpki-client